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Amendments to the claims: 



This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of claims: 

Claim 1 (currently amended): An authorization method for storing and retrieving data, applied 
to an authorization system for connecting a terminal device to a resource system established by 
an application service provider (ASP) via a network, so as to allow the ASP to authorize a user at 
the terminal device to interact therewith for data storage and retrieval, wherein the authorization 
system is preconstructed with a database and an authorization account, while the database 
includes a plurality of user's data for identifying the user submitting a request for logging into the 
resource system, and the authorization account is used for authorizing the user to store and 
retrieve the resource system; the authorization method comprising the steps of: 

(1) receiving user's data inputted by the user to the terminal device via the authorization 

system; 

(2) comparing the user's data transmitted from the terminal device with the user's data 
stored in the database via the authorization system, wherein if no user's data in the database 
matches the user's data transmitted from the terminal device, then step (3) is followed; if one of 
the user's data in the database matches the user's data transmitted from the terminal device, then 
step (4) is followed; 

(3) sending a message of failure in logging into the resource system via the authorization 
system to the terminal device, and allowing the user at the terminal device to re-input user's data 
for logging into the resource system; then returning to the step (1); and 

(4) sending an authorization account via the authorization system to the resource system, 
and transmitting data generated by the resource system to the terminal device, so as to allow the 
user at the terminal device to interact with the resource system for data storage and retrieval , and 
store and retrieve data from the resource system after the user's data transmitted from the 
terminal is determined to be matched with one of the user's data in the database and authorization 
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Claim 2 (original): The authorization method of claim 1, wherein the user's data include a 
dedicated user's name and a password corresponding to the user's name. 

Claim 3 (original): The authorization method of claim 1, wherein the resource system is an 
enterprise resource planning (ERP) system. 

Claim 4 (canceled) 

Claim 5 (original): The authorization method of claim 1, wherein the authorization system is 
established in a server host. 

Claim 6 (original): The authorization method of claim 5, wherein the authorization system is 
middleware. 

Claim 7 (original): The authorization method of claim 1, wherein the authorization system and 
the resource system are contained in world wide web (WWW). 

Claim 8 (currently amended): An authorization system for storing and retrieving data, for 
connecting a terminal device to a resource system established by an application service provider 
(ASP) via a network, so as to allow a user at the terminal device to store and retrieve application 
software provided by the ASP; the authorization system comprising: 

a database for establishing user's data for storing and retrieving the resource system; 

a receiving module for receiving user's data for logging into the resource system inputted 
by the user at the terminal device; 

an identifying module for comparing the user's data transmitted from the receiving 
module with the user's data stored in the database; 

a replying module for responding according to compared results from the identifying 
module, wherein if no user's data in the database matches the user's data inputted by the user, the 
replying module sends a message of failure in logging into the resource system to the user at the 
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terminal device, and allows the user to re-input user f s data for logging into the resource system; 
if one of the user's data in the database matches the user's data inputted by the user, the replying 
module generates a message of permission for logging into the resource system; 

a managing module having an authorization account for logging into the resource system, 
wherein the managing module sends an authorization account to the resource system according 
to the permission message transmitted from the replying module after the user's data transmitted 
from the terminal is determined to be matched with one of the user f s data in the database, so as to 
allow the terminal device to interact with the resource system for data storage and retrieval , and 
store and retrieve data from the resource system, after the authorization account is identified by 
the resource system and authorization is granted ; and 

a processing module for processing data generated by the interaction between the 
terminal device and the resource system, so as to display the data in the form of a web page on a 
browser of the terminal device. 

Claim 9 (original): The authorization system of claim 8, wherein the web page is in the form of 
extensible markup language (XML). 

Claim 10 (original): The authorization system of claim 8, wherein the user's data include a 
dedicated user's name and a password corresponding to the user's name. 

Claim 1 1 (original): The authorization system of claim 8, wherein the resource system is an 
enterprise resource planning (ERP) system. 

Claim 12 (canceled) 

Claim 13 (original): The authorization system of claim 8, wherein the authorization system is 
established in a server host. 

Claim 14 (original): The authorization system of claim 13, wherein the authorization system is 
middleware. 
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Claim 15 (original): The authorization system of claim 8, wherein the authorization system and 
the resource system are contained in world wide web (WWW). 



